This is a summary of what must be in place before the migration starts. More information is found in the article.

• Java 8 Runtime is installed
• JRE_HOME is set as environmental variable
• java-security-policy-fix is recorded
• Databases are correctly registered in database.properties
• Run Data Encryption Certificate is provided and configured in encryption-config.xml
• Personalization is done correctly in migrate_persons.properties
• Configuration for cards/tokens is correct in migrate_cards.properties
• Certificates configuration is correct in migrate_certificates.properties (PKI only Card management)

1. Install the current version of Java Runtime Environment (JRE).
2. Set JRE_HOME to the installation directory of java jre
   (for example: C:\Program Files\Java\jre1.8.0_161\bin)
3. Import the java-security-policy-fix for the installed Java version. The jce-policy-8.zip is provided with the migration package.
4. Unpack the migration package of delivery in a directory of your choice.

1. Go to the specified migration directory.

2. In the file database.properties specify the attributes HOST_NAME, DB_PORT, DB_NAME, USER_NAME and USER_PASSWORD for SmartACT and

1. Make sure that the certificate for encrypting run data in SmartACT (idexpertcert02.p12) is stored in the directory config. The migration tools contains this certificate, if it is not supplied by you.

2. Open the file encryption-config.xml and check if the value of the attribute pin under the key idexpertcert02 is correct, otherwise set the value:

   Code Block
   title encryption-config.xml
   ... <keys> <key name="idexpertcert02"> <type name="pkcs12" locationValue="config/idexpertcert02.p12" pin="XXXX"/> </key> </keys> ...

   
   

These are examples of person statuses:

...
smartact.person.state.active=1
smartact.person.state.inactive=2
smartact.person.states=${smartact.person.state.active}, 
${smartact.person.state.inactive}

Every person from SmartACT is assigned the role BaseRoleSelfServiceUser as part of the migration

The mapping of the data fields between

For this, the MigrationId field is used, which is already used in SmartACT as uniqueness criterion.

Mapping of card fields

The field MigrationId is used, which is already used in SmartACT as uniqueness criterion.

The following relation is defined especially for the card (see also Relation between the objects)

The mapping of card data fields

The field MigrationId is used, which is already used in SmartACT as uniqueness criterion.

Specifically for the certificate, the following relation is defined (see also Relation between the objects)

Under Unix/Linux, give the shell scripts the correct rights using chmod.

During the migration, log files are created in the subdirectory logs/ 

• batch.log
  Contains the complete logging of the data migration, except the migration of old CA certificates to Nexus Certificate Manager.
• batch_skipped.log
  Contains a log of all data records (with all data) that could not be transferred, including the error message. This is for error analysis.
• batch_overview.log
  Is only created when the data migration completes successfully. Contains a quantitative comparison of the two databases after migration, structured by tenant, type and status.

If necessary, you can customize the path of the log messages by opening the log4j.xml file and specifying the file (Attribute File) and maximum index (attribute MaxBackupIndex) in the sections BATCHLOG, BATCHLOG_SKIPPED and BATCHLOG_OVERVIEWLOG as below. The log levels should only be adjusted after consultation with the consultant or project manager at Nexus, as these can have a major impact on the duration of the migration.

...
<!-- definition of output sources -->

	<!-- Logging to Console -->
	<appender name="STDOUT" class="org.apache.log4j.ConsoleAppender">
		<param name="Encoding" value="UTF-8"/>
		<layout class="org.apache.log4j.PatternLayout">
			<param name="ConversionPattern" value="%d %-5p %-25t (%F:%L) : %m%n"/>
		</layout>
	</appender>
	<appender name="BATCHLOG" class="org.apache.log4j.RollingFileAppender">
		<param name="File" value="logs/batch.log" />
		<param name="Append" value="true" />
		<param name="Encoding" value="UTF-8"/>
		<param name="BufferedIO" value="false" />
		<param name="MaxBackupIndex" value="40" />
		<param name="MaxFileSize" value="50MB" />
		<layout class="org.apache.log4j.PatternLayout">
			<param name="ConversionPattern" value="(%d) %-5p %-15t (%F:%L) : %m%n"/>
		</layout>
	</appender>


	<appender name="BATCHLOG_SKIPPED" class="org.apache.log4j.RollingFileAppender">
		<param name="File" value="logs/batch_skipped.log" />
		<param name="Append" value="true" />
		<param name="Encoding" value="UTF-8"/>
		<param name="BufferedIO" value="false" />
		<param name="MaxBackupIndex" value="40" />
		<param name="MaxFileSize" value="50MB" />
		<layout class="org.apache.log4j.PatternLayout">
			<param name="ConversionPattern" value="(%d) %-5p %-15t (%F:%L) : %m%n"/>
		</layout>
	</appender>
	
	<appender name="BATCHLOG_OVERVIEWLOG" class="org.apache.log4j.RollingFileAppender">
		<param name="File" value="logs/batchoverview.log" />
		<param name="Append" value="true" />
		<param name="Encoding" value="UTF-8"/>
		<param name="BufferedIO" value="false" />
		<param name="MaxBackupIndex" value="40" />
		<param name="MaxFileSize" value="2MB" />
		<layout class="org.apache.log4j.PatternLayout">
			<param name="ConversionPattern" value="(%d): %m%n"/>
		</layout>
	</appender>

	<appender name="BATCHLOG_CERTIFICATEEXPORT" class="org.apache.log4j.RollingFileAppender">
		<param name="File" value="logs/batch_certCA.log" />
		<param name="Append" value="true" />
		<param name="Encoding" value="UTF-8"/>
		<param name="BufferedIO" value="false" />
		<param name="MaxBackupIndex" value="40" />
		<param name="MaxFileSize" value="2MB" />
		<layout class="org.apache.log4j.PatternLayout">
			<param name="ConversionPattern" value="(%d): %m%n"/>
		</layout>
	</appender>
...

The term client refers to the master data template from SmartACT (table T_MASTERDATATEMPLATE), which is used as the data source of the migration. All tenants are created with their own IDs, the initially existing tenant with ID 1 remains. The clients are stored in Identity Manager in

When mapping the person, type conversion rules can be specified for the fields

When saving, the corresponding record (object) can be linked to one or more objects, for example:

• Card with person
• Certificate with card and person

The desired relations are set using the attribute dataPoolRelations, which refers to a list consisting of one or more relations of type DataPoolRelation. Person should be related to card and card should be related to certificate.

DataPoolRelation is defined as follows: